Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/7a806c-2f08-47d9-9cc9-658d4c4628ad/1/kaGph50MrnZk9_Ae5Md0JZHkmEM.roa
File: kaGph50MrnZk9_Ae5Md0JZHkmEM.roa (raw, json)
Hash identifier: KOuavh84jne4Oayx4KsSyaMHm/sNkEEba6rU0bPnEbc=
Subject key identifier: 91:A1:A9:87:9D:0C:AE:76:64:F7:F0:1E:E4:C7:74:25:91:E4:98:43
Certificate issuer: /CN=a08e41cbfdefad0bb0e297247acc1a201d2df4a0
Certificate serial: 019425FDCB77468E5E5BB9C8FD47522F7451
Authority key identifier: A0:8E:41:CB:FD:EF:AD:0B:B0:E2:97:24:7A:CC:1A:20:1D:2D:F4:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oI5By_3vrQuw4pckeswaIB0t9KA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/7a806c-2f08-47d9-9cc9-658d4c4628ad/1/kaGph50MrnZk9_Ae5Md0JZHkmEM.roa
Signing time: Thu 02 Jan 2025 07:49:37 +0000
ROA not before: Thu 02 Jan 2025 07:49:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211606
IP address blocks: 185.254.121.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:cb:77:46:8e:5e:5b:b9:c8:fd:47:52:2f:74:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a08e41cbfdefad0bb0e297247acc1a201d2df4a0
Validity
Not Before: Jan 2 07:49:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=91a1a9879d0cae7664f7f01ee4c7742591e49843
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2e:36:bd:d0:87:70:c2:c3:6f:69:66:89:c3:
a3:eb:db:fb:fa:42:50:c0:fe:69:d4:f0:68:43:6c:
e0:a9:b9:0c:d9:1a:74:69:76:d3:6d:9a:42:34:ac:
ad:dc:9c:38:50:0c:b4:2b:75:38:41:f3:e0:6e:a9:
3d:d0:c6:27:7a:8c:79:fa:0d:36:0e:be:f0:e4:64:
b2:56:34:47:d1:c2:ea:9e:03:4e:9c:f3:1d:b9:13:
18:e1:32:74:da:0c:4c:e9:07:87:0b:11:9d:d0:e7:
32:c4:fd:d4:17:99:93:8a:a9:38:77:5a:c4:0f:49:
97:95:92:eb:9c:c4:3e:75:ad:f0:82:68:22:52:0a:
36:29:4a:ca:ae:6e:8b:4c:a2:b8:c9:55:27:26:04:
24:2a:80:dc:23:6a:f3:cd:9e:58:22:4c:69:46:9b:
fc:0d:bd:70:78:a4:da:77:4d:dc:d5:de:46:d2:cc:
95:75:66:44:00:93:d3:cd:df:ad:d5:9b:9b:35:30:
fc:d0:23:40:53:52:02:a2:72:3a:8a:7f:74:86:d8:
f9:f9:73:98:eb:2b:f2:6f:e3:ca:6c:db:46:c3:33:
38:9e:d0:f5:e4:cc:bb:d7:c4:fe:0e:79:17:a3:af:
5d:36:13:40:21:d8:fd:02:18:37:21:f4:37:a3:91:
f1:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:A1:A9:87:9D:0C:AE:76:64:F7:F0:1E:E4:C7:74:25:91:E4:98:43
X509v3 Authority Key Identifier:
keyid:A0:8E:41:CB:FD:EF:AD:0B:B0:E2:97:24:7A:CC:1A:20:1D:2D:F4:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oI5By_3vrQuw4pckeswaIB0t9KA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/7a806c-2f08-47d9-9cc9-658d4c4628ad/1/kaGph50MrnZk9_Ae5Md0JZHkmEM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/7a806c-2f08-47d9-9cc9-658d4c4628ad/1/oI5By_3vrQuw4pckeswaIB0t9KA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.254.121.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:e7:09:f1:ef:6b:6e:12:eb:38:45:2f:69:84:2b:66:55:7b:
9d:d9:b1:9c:1a:b1:04:79:b8:af:75:fd:c0:6b:36:ce:17:51:
c6:25:8c:e9:1f:97:bc:d7:4f:f3:97:2a:96:17:6c:b1:19:97:
33:e5:43:ea:7d:2d:c8:90:a8:4e:38:89:53:41:b1:65:c3:14:
97:9b:8f:1d:52:3a:43:c0:56:09:12:75:ab:b5:54:df:be:f9:
ca:73:87:5c:bd:a0:a7:8a:55:11:dc:82:48:12:70:79:81:65:
e5:46:96:ae:64:82:59:b1:b9:3f:73:39:ed:4a:e0:b8:cf:3c:
90:5e:06:ef:81:e1:43:48:78:d2:be:11:e3:64:63:66:bc:50:
d9:ab:13:69:e8:52:8f:e6:6a:a0:d2:4a:c1:6d:04:2d:c1:c4:
31:15:25:0f:77:26:a4:1c:31:26:00:bd:73:21:3d:b1:e5:ef:
36:de:23:67:a1:0c:d4:aa:ec:2f:d2:a2:11:85:1c:8c:99:f7:
b5:84:8f:a9:31:2d:92:28:93:87:d1:75:e0:89:44:7c:b9:2d:
76:63:40:0f:dd:8d:38:f5:37:1f:15:ec:36:36:98:64:7e:c3:
e4:a4:25:a8:ae:c2:e5:1f:a3:71:cf:21:79:e6:ae:bb:46:5e:
a2:05:8b:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:13 2025 by rpki-client on console.sobornost.net